GEN000020 - The system must require authentication upon booting into single-user and maintenance modes.

Information

If the system does not require a valid root password before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Assign a root account password for any bootable partition.

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Group-ID|V-756, Rule-ID|SV-27039r1_rule, STIG-ID|GEN000020, Vuln-ID|V-756

Plugin: Unix

Control ID: c6dc6ad000dc284fb0e2f26193599aeb407127267b4e3962b4cf8e44c72b8e29